This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File:                     LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier:          MD6V0HzVCBAfH5TgUV6kJLaX1sBQnwjy7vPb5iEU7lE=
Subject key identifier:   7D:C4:6E:95:38:92:20:77:BD:2A:50:84:4A:0D:6A:CF:80:F4:65:10
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer:       /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial:       019BF3F5B521EB39B169CF10BDFF5507D929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number:          123B
Signing time:             Sun 25 Jan 2026 07:02:04 +0000
Manifest this update:     Sun 25 Jan 2026 07:02:04 +0000
Manifest next update:     Mon 26 Jan 2026 07:02:04 +0000
Files and hashes:         1: LGbDBvE57-d51wae1jdeed1elzM.roa (hash: +JgCmgs+MPnrH+unBnQBmH3Z0J4auv7J23LfruzwOGI=)
                          2: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: oQlVE48j9F3vYbJ0WSLLTj/QttCcDA7tJjOWDzRqkfE=)
                          3: Mdk2rGO_DVEGin1GNTSly2AoZK4.roa (hash: iLFOQXgOcjprFdT2TgsrTO7NFGOS4V7YveXSXGEQwjc=)
                          4: MnysfPyo4atkz89bty1U8O9Gpxk.roa (hash: j0Rn3Q7Gpb1iUDxURvHQTFFvAHFS3dyzvh6jFQiBkzw=)
                          5: lfBfpuueFf8CZSpriLw9-1MWh0c.roa (hash: OX5r2aPlCVyVhqyEhlOJPVx5LfmFfhtFl33BQzrPhX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:b5:21:eb:39:b1:69:cf:10:bd:ff:55:07:d9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
        Validity
            Not Before: Jan 25 07:02:04 2026 GMT
            Not After : Jan 26 07:02:04 2026 GMT
        Subject: CN=7dc46e9538922077bd2a50844a0d6acf80f46510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:9c:c6:b7:99:06:63:eb:a1:d9:6e:ed:f4:
                    af:b6:e9:23:33:26:7d:45:da:61:5b:56:b7:23:ee:
                    5a:bd:03:8f:60:22:d9:aa:48:52:0c:4e:06:78:c3:
                    c4:04:c9:1d:24:83:bf:a4:99:81:1a:d6:37:d1:3e:
                    19:75:00:64:70:49:e5:d6:54:9b:dc:b4:8d:ff:62:
                    63:e0:ad:5c:f0:8a:63:7b:d0:d9:5d:89:a6:f7:d9:
                    24:4c:d2:80:e5:8f:29:34:62:30:2a:50:32:91:1d:
                    2e:53:49:07:44:00:f1:78:06:7d:9f:0f:66:99:13:
                    e0:45:3c:93:55:ae:1b:e1:05:0b:61:1a:ee:53:4e:
                    25:4a:ea:9c:cb:ba:d5:75:b7:7a:a5:49:04:56:40:
                    a4:52:78:a6:18:75:07:d0:d2:7e:d2:3d:f5:4d:97:
                    a6:af:90:ab:2e:0e:f2:bf:58:ed:f3:05:28:a1:65:
                    42:b4:df:2e:f5:73:92:ba:86:ec:b2:76:75:e0:07:
                    a2:7d:6d:a5:68:b8:8e:ba:64:de:71:de:a6:91:50:
                    a7:1c:73:64:7a:07:10:9c:3f:a5:7c:35:cb:0c:52:
                    18:13:7a:2a:9a:ed:cb:50:55:ce:44:89:bd:bf:0f:
                    82:15:4c:4a:16:41:49:e6:7d:bb:bd:78:13:88:71:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C4:6E:95:38:92:20:77:BD:2A:50:84:4A:0D:6A:CF:80:F4:65:10
            X509v3 Authority Key Identifier:
                keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6b:c1:bd:77:d7:7b:f8:84:3f:06:e5:08:d0:88:b5:3a:e7:
         96:b6:b6:b8:a9:c1:fe:d6:4c:a4:7e:d4:9d:ad:b4:a7:f7:f3:
         03:1f:79:54:8e:68:20:a4:6c:b8:9e:3f:9c:a4:97:32:c1:58:
         6a:44:ff:af:21:6b:e5:1a:1e:2e:22:55:5f:a7:e8:d7:d8:44:
         9a:4f:7b:c6:5b:f7:99:8b:3a:78:77:43:9d:d2:37:a6:d2:1e:
         de:d3:74:3e:d3:d4:10:68:9d:ef:50:07:a5:eb:04:3f:8b:3e:
         57:c1:03:9c:fd:97:ff:8a:81:70:fa:64:cf:8e:eb:79:76:74:
         bd:1b:02:be:49:e0:ae:95:e8:ac:42:df:ab:2e:14:fc:55:04:
         e8:e9:2c:3d:31:a3:4a:24:ba:8c:6e:53:80:26:11:15:9a:e0:
         0d:ab:31:f1:3c:ce:a6:88:3f:19:db:f9:d3:50:8c:cd:2d:3b:
         b5:07:41:68:66:bd:84:fa:b1:37:d0:70:c9:c0:6f:54:ba:bd:
         52:f6:bc:9e:81:90:61:02:b6:b6:39:d2:f9:e5:eb:f2:17:52:
         77:4f:8e:f1:29:a3:5e:7a:37:94:f4:d6:d5:78:49:7d:6d:15:
         94:e9:85:bd:2f:0e:6b:dd:ad:3b:d2:79:24:af:52:cd:61:bb:
         37:09:8d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvz9bUh6zmxac8Qvf9VB9kpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzEzNmVkMTA5OTg1ODBhNTE3ZDk1OThhYmNhMzNkOWJh
NjY1OTkwHhcNMjYwMTI1MDcwMjA0WhcNMjYwMTI2MDcwMjA0WjAzMTEwLwYDVQQD
Eyg3ZGM0NmU5NTM4OTIyMDc3YmQyYTUwODQ0YTBkNmFjZjgwZjQ2NTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zicxreZBmProdlu7fSvtukjMyZ9
RdphW1a3I+5avQOPYCLZqkhSDE4GeMPEBMkdJIO/pJmBGtY30T4ZdQBkcEnl1lSb
3LSN/2Jj4K1c8Ipje9DZXYmm99kkTNKA5Y8pNGIwKlAykR0uU0kHRADxeAZ9nw9m
mRPgRTyTVa4b4QULYRruU04lSuqcy7rVdbd6pUkEVkCkUnimGHUH0NJ+0j31TZem
r5CrLg7yv1jt8wUooWVCtN8u9XOSuobssnZ14AeifW2laLiOumTecd6mkVCnHHNk
egcQnD+lfDXLDFIYE3oqmu3LUFXORIm9vw+CFUxKFkFJ5n27vXgTiHHZFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3EbpU4kiB3vSpQhEoNas+A9GUQMB8GA1UdIwQY
MBaAFC8xNu0QmYWApRfZWYq8oz2bpmWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYt
OTI5ZjEwNjYzMGYxLzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYtOTI5ZjEwNjYzMGYx
LzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2vBvXfX
e/iEPwblCNCItTrnlra2uKnB/tZMpH7Una20p/fzAx95VI5oIKRsuJ4/nKSXMsFY
akT/ryFr5RoeLiJVX6fo19hEmk97xlv3mYs6eHdDndI3ptIe3tN0PtPUEGid71AH
pesEP4s+V8EDnP2X/4qBcPpkz47reXZ0vRsCvkngrpXorELfqy4U/FUE6OksPTGj
SiS6jG5TgCYRFZrgDasx8TzOpog/Gdv501CMzS07tQdBaGa9hPqxN9BwycBvVLq9
Uva8noGQYQK2tjnS+eXr8hdSd0+O8SmjXno3lPTW1XhJfW0VlOmFvS8Oa92tO9J5
JK9SzWG7NwmN5g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:35:37 2026 by rpki-client